Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fd86b7-b7c5-41ac-b436-d3abf8bfeee6/1/6eQL3g8KHSAuOyenkITK_gaP0i8.roa
File: 6eQL3g8KHSAuOyenkITK_gaP0i8.roa (raw, json)
Hash identifier: an4TR5VRu2y2JqejKcnNTaqM0+7Upzk1mdDJie57+pM=
Subject key identifier: E9:E4:0B:DE:0F:0A:1D:20:2E:3B:27:A7:90:84:CA:FE:06:8F:D2:2F
Certificate issuer: /CN=d6d3ffae45cc399f0eca0fc0a1f647e8e6125cae
Certificate serial: 01856C1CB04A9F20F9A174094FA8607123DC
Authority key identifier: D6:D3:FF:AE:45:CC:39:9F:0E:CA:0F:C0:A1:F6:47:E8:E6:12:5C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tP_rkXMOZ8Oyg_AofZH6OYSXK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fd86b7-b7c5-41ac-b436-d3abf8bfeee6/1/6eQL3g8KHSAuOyenkITK_gaP0i8.roa
Signing time: Sun 01 Jan 2023 06:54:57 +0000
ROA not before: Sun 01 Jan 2023 06:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.246.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:b0:4a:9f:20:f9:a1:74:09:4f:a8:60:71:23:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d3ffae45cc399f0eca0fc0a1f647e8e6125cae
Validity
Not Before: Jan 1 06:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9e40bde0f0a1d202e3b27a79084cafe068fd22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:b0:08:f1:05:fa:e1:c8:83:ce:54:cf:89:
91:89:06:fd:d8:a1:1f:d1:80:17:c6:44:7b:0c:31:
e0:7e:80:42:56:30:94:25:56:84:54:6d:71:21:62:
30:e1:52:a7:a0:fb:9b:07:21:9d:5a:89:c5:a3:37:
d4:59:48:28:9c:d8:1e:c7:83:3a:a5:78:29:0a:3a:
0f:ed:84:be:bc:59:2e:1e:2b:ec:bf:b7:eb:76:25:
3c:12:7e:d4:2a:ea:96:82:39:9d:33:a0:db:3d:b7:
5d:89:5d:09:db:92:2b:d2:40:0a:2d:b5:0f:fb:43:
bb:7a:9f:bb:ac:56:79:f9:1f:69:f5:58:61:2d:15:
e5:be:7a:f6:e5:a2:fa:85:16:d4:b7:cc:f1:4a:a9:
dd:df:5f:5b:45:74:2b:de:17:11:d6:bd:e6:e3:22:
d6:5c:0c:79:9f:69:a9:ae:f7:9c:c6:d1:40:d4:5f:
1d:aa:34:fa:b7:2c:4f:23:35:70:7f:64:0f:ed:e6:
d3:1e:c4:b1:09:dc:e4:bc:89:3d:f3:3b:b7:1b:ad:
90:96:3e:34:0d:97:16:25:f4:18:4b:36:df:07:59:
7b:60:36:7c:c6:7a:86:80:6f:e0:76:9c:e1:75:d1:
2a:02:53:26:9c:a3:63:5a:96:42:12:ce:76:4c:13:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E4:0B:DE:0F:0A:1D:20:2E:3B:27:A7:90:84:CA:FE:06:8F:D2:2F
X509v3 Authority Key Identifier:
keyid:D6:D3:FF:AE:45:CC:39:9F:0E:CA:0F:C0:A1:F6:47:E8:E6:12:5C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tP_rkXMOZ8Oyg_AofZH6OYSXK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fd86b7-b7c5-41ac-b436-d3abf8bfeee6/1/6eQL3g8KHSAuOyenkITK_gaP0i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fd86b7-b7c5-41ac-b436-d3abf8bfeee6/1/1tP_rkXMOZ8Oyg_AofZH6OYSXK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fb:ce:9d:02:52:c6:9e:dd:46:b7:d9:0d:8f:e8:c4:2a:7e:
7d:26:19:61:84:28:2e:15:80:6b:16:e1:3c:fe:12:7e:60:09:
b9:35:ff:a8:f1:28:d6:32:1e:df:07:2c:e2:7d:48:4f:a3:31:
31:80:64:1b:ff:4a:22:ad:d1:cb:8c:e0:db:16:6b:af:ad:32:
40:08:be:28:f8:87:cc:0c:5c:56:88:6d:fd:d6:36:b3:8f:ea:
36:e6:ef:10:2c:63:9a:09:1e:fe:a1:ab:a7:4e:d1:86:2d:0f:
7b:3b:6e:89:b6:12:80:a4:eb:d8:af:3b:7d:c8:a6:58:52:65:
81:98:1c:18:da:34:ad:d7:34:2e:7c:7f:70:58:33:1d:49:e3:
d2:94:1f:99:b4:7b:03:b2:dd:b3:6a:a7:e0:e8:0b:f8:ef:a2:
05:a0:e2:71:d5:f6:45:5d:5f:9b:2d:4b:87:b5:a6:a9:dc:be:
e4:5c:d9:6f:b9:ee:77:07:8b:ad:57:dd:80:35:02:28:7e:6b:
6b:45:2f:8a:85:33:17:99:0d:78:ea:67:78:0c:01:97:60:78:
9c:8a:cb:93:05:41:57:41:a3:b5:34:7f:7a:77:20:58:24:aa:
47:93:28:5d:f7:17:08:b1:d4:cc:52:1c:80:1c:50:ba:9e:b8:
e5:e3:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 13:20:42 2023 by rpki-client on console-ams.rpki-client.org